PT-2025-14311
CVE-2025-21930
·
Published
2025-04-01
·
Updated
2026-10-13
Description by
CVSS 2.0
6.5
MediumMetricsAV:A/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.12.18
Linux kernel versions prior to 6.13.6
Description
The issue is related to the Linux kernel's iwlwifi module, where it attempts to communicate with a dead firmware, resulting in a bad state and warnings. The problem occurs when the
iwl trans send cmd function is called without checking if the firmware is alive. This can lead to a call trace with warnings and errors, including iwl fw dbg clear monitor buf and iwl dbgfs fw dbg clear write functions.Recommendations
For Linux kernel versions prior to 6.12.18, update to version 6.12.18 or later to resolve the issue.
For Linux kernel versions prior to 6.13.6, update to version 6.13.6 or later to resolve the issue.
As a temporary workaround, consider adding a check to ensure the firmware is alive before sending commands using the
iwl trans send cmd function. Found an issue in the description? Have something to add? Feel free to write us 👾